Posted by Sysdream Labs on Apr 21

WordPress iThemes Security (Better WP Security) Insecure Backup/Logfile Generation (predicatable filename)
==========================================================================================================

Description
===========

When using the “database backup/logging on filesystem” feature, iThemes security generates a weak filename allowing
attackers to obtain the backup/log file if they know when the backup/log file was…